Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/WacUruZTE83WEEePnyB3KKF0YFU.roa
File: WacUruZTE83WEEePnyB3KKF0YFU.roa (raw, json)
Hash identifier: IGW0uLOK6yIPDXD8+jDEju++6EJZMklynz//i9x70Jo=
Subject key identifier: 59:A7:14:AE:E6:53:13:CD:D6:10:47:8F:9F:20:77:28:A1:74:60:55
Certificate issuer: /CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Certificate serial: 01942444B552DE823DD3601686F9B7BBDEC6
Authority key identifier: A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/WacUruZTE83WEEePnyB3KKF0YFU.roa
Signing time: Wed 01 Jan 2025 23:47:50 +0000
ROA not before: Wed 01 Jan 2025 23:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5421
IP address blocks: 62.44.96.0/19 maxlen: 32
2001:67c:20d0::/47 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b5:52:de:82:3d:d3:60:16:86:f9:b7:bb:de:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Validity
Not Before: Jan 1 23:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59a714aee65313cdd610478f9f207728a1746055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:bf:5a:61:43:63:fa:bc:3b:9b:d0:34:4c:
d9:4a:e1:c2:87:59:cf:fb:47:b4:78:e5:f1:7a:43:
aa:d4:bb:89:0d:bd:8c:44:35:34:ec:31:4c:61:02:
eb:38:51:e2:ae:80:ca:38:6d:5f:ed:f3:67:3e:af:
f9:cd:c6:22:1e:dc:3e:08:a1:4e:b3:0e:e6:b3:e6:
82:05:76:00:5c:ca:66:21:ca:7f:72:5d:81:94:60:
0f:34:d6:c8:17:29:3e:dd:c8:43:ba:7b:4b:54:c6:
20:69:79:00:6c:eb:58:75:44:bd:ec:fb:01:5a:63:
a9:af:71:54:46:34:ce:c9:37:39:e7:e6:e3:0f:b0:
db:83:54:66:52:7b:a4:7c:c1:7e:91:96:01:92:8c:
86:12:93:8a:b7:93:12:b5:74:b6:5e:8f:96:4e:7f:
4f:5e:ff:5e:4a:08:53:a9:8a:4b:f5:27:d6:6e:ab:
fd:29:a3:9e:af:65:7c:6e:76:5e:20:70:ec:61:14:
ed:e6:26:17:3f:8b:11:43:3b:e3:3e:6f:18:48:20:
38:83:d6:9b:00:3d:7e:41:93:76:e5:2b:47:3a:31:
da:5d:c0:18:20:da:09:a4:40:b5:7b:51:0a:fc:2e:
2b:0b:bf:73:ab:b7:9a:37:9f:50:e6:d6:df:52:68:
f9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A7:14:AE:E6:53:13:CD:D6:10:47:8F:9F:20:77:28:A1:74:60:55
X509v3 Authority Key Identifier:
keyid:A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/WacUruZTE83WEEePnyB3KKF0YFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.44.96.0/19
IPv6:
2001:67c:20d0::/47
Signature Algorithm: sha256WithRSAEncryption
8f:5e:93:d1:4a:9b:cc:4f:05:c2:a6:ef:29:7a:67:5c:bd:0a:
43:ae:03:a6:6b:97:67:d7:a2:76:b5:a3:f4:54:16:78:46:36:
96:21:16:4a:14:b2:ae:57:f6:95:eb:d1:b9:35:90:8c:9f:58:
14:26:42:35:07:3d:24:8c:35:7f:41:32:9e:d5:f4:98:11:00:
40:c1:4c:42:25:8e:bf:6e:ed:41:a1:fc:9b:e5:d5:15:46:7f:
a9:d4:1a:bd:6c:ad:41:b6:00:43:7c:86:10:9b:db:bd:77:c3:
d5:3b:df:4c:5a:66:cf:db:b2:cf:18:40:a8:f8:72:0f:af:56:
07:ea:a1:a9:3c:09:88:a7:e6:cf:9f:2e:bd:d2:2a:8f:62:7f:
86:6e:1c:c8:ba:46:37:d9:e1:4a:99:b7:ce:f1:0b:e9:2c:9f:
82:0e:3a:5a:7e:85:ab:74:bb:69:a8:e9:45:e7:b9:e6:0e:cf:
23:61:6f:49:41:c1:63:0c:5d:c9:58:4e:44:3f:81:b2:44:f5:
60:a8:0e:e4:cd:a2:d5:18:06:4e:0b:d8:0a:7b:42:07:ea:10:
e0:48:2d:f5:e7:1a:ae:37:fc:e4:23:63:ba:a0:88:a9:f4:7c:
92:c0:65:7c:72:51:0e:c1:7f:ba:8d:fc:ae:9c:bd:36:af:df:
84:e2:5f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:24 2025 by rpki-client